Group Policy-Domain Controller-Terminal SVC

[Guest]

Hello All,


We have One Windows 2000 Server(Domain Controller) with Terminal Service running.

I Need to control USERS in Terminal Service (Access control Drive, internet,... etc..)

I tried but Noting has been work!!!! (User can logon and able to see all the drive and.... etc..)

Could someone please help me out with this one.




Thank you,


Sean

 

[Vera Noest [MVP]]

Normally, you configure this in a Group Policy, but because you
are running TS on your Domain Controller (*not* recommended!) you
will probably notice that any restrictions made there will also
affect your users normal logon to their workstation.

278295 - How to Lock Down a Windows 2000 Terminal Services Session
http://support.microsoft.com/?kbid=278295

 

[Guest]

Vera Noest

Thank you for help

I did use GPO to give restriction, but still did not doing anything

Any Ideas

Thanks

Sean

 

[Guest]

Where are you applying your GPO

Patrick Rous
Microsoft MVP - Terminal Serve
http://ww.workthin.co

----- Sean P wrote: ----

Vera Noest


Thank you for help


I did use GPO to give restriction, but still did not doing anything


Any Ideas


Thanks

Sean

 

[Answers]

It looks to me like Microsoft has taken away the ability to set group
policies for a "member" server where no domain is present, as was the case
with all previous versions of NT since 3.51.

Is this true?

If so, there is really no choice but to install a server as a domain
controller, if you are wanting to lock down the terminal services
environment, and are in a single server setting, which most small businesses
(most of America's business) are.

Are they inviting yet one more reason to hate Microsoft?

 

[Vera Noest [MVP]]

It is perfectly possible to implement a local policy on a standalone
server, with gpedit.msc

 

[Answers]

No longer for users however, it is necessary to institute it for all users,
i.e., for the COMPUTER, true?

For instance, if I want to remove access to RUN, it is a universal denial
and therefore even ADMINSTRATORS are denied access.